Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
File: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json)
Hash identifier: YSKktEaEMVjVTQAeWgCCgJT5yJVQRC78hUfGsaisxIc=
Subject key identifier: A3:A5:39:71:C3:DE:17:E3:A2:6B:86:8A:67:98:FA:59:DB:92:F7:40
Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
Certificate issuer: /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Certificate serial: 01967BD82F4000707E812557126B0D27FE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
Manifest number: 14A3
Signing time: Mon 28 Apr 2025 10:01:27 +0000
Manifest this update: Mon 28 Apr 2025 10:01:27 +0000
Manifest next update: Tue 29 Apr 2025 10:01:27 +0000
Files and hashes: 1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: kJzEUKZF76JBe/AZmhB+g5GwwkaWO9vBlvjlsHfBFQY=)
2: C2lOXCmp50JxgRXiUYxe6B0_iZ4.roa (hash: 8UNsnDOqjjcGGg587BCaothe5brbvtl6qwWOiSpwE6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d8:2f:40:00:70:7e:81:25:57:12:6b:0d:27:fe:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Validity
Not Before: Apr 28 10:01:27 2025 GMT
Not After : Apr 29 10:01:27 2025 GMT
Subject: CN=a3a53971c3de17e3a26b868a6798fa59db92f740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:2c:e9:89:4b:a1:17:b0:4e:1e:d2:84:45:
35:55:64:98:1e:15:ef:f4:c5:4c:a4:cf:11:8e:ef:
a8:5b:c1:42:4a:fc:10:cb:52:2e:bd:c7:51:0f:43:
01:9f:50:08:f2:eb:02:cd:58:da:83:51:c3:59:43:
d2:27:2d:0c:65:14:18:b6:ae:85:01:3d:9f:fd:f5:
48:52:e1:4d:ab:de:84:43:19:c9:4e:9a:f1:b9:b4:
2c:b4:15:db:18:64:23:f1:2b:3c:07:75:10:89:97:
4d:d7:91:d1:5b:ba:de:5f:7d:d8:4d:48:15:ff:7d:
df:2a:5d:3b:0b:ee:4a:f9:4b:ae:9d:5a:a8:5a:a0:
7a:d2:ec:74:ed:b4:39:9c:5d:e7:d3:96:73:65:b0:
a0:1a:3f:d1:8e:a2:d4:ab:19:ea:72:6f:60:ad:ca:
e6:1c:6d:a6:d6:aa:6f:fd:52:c3:66:4a:53:ac:1e:
47:4c:d3:39:b6:40:19:6c:85:e5:20:62:ca:e6:6c:
d4:0b:83:d8:b6:cd:fa:c4:20:f5:70:04:1b:99:51:
ce:fa:23:97:fb:92:02:85:f4:cb:cd:b6:81:6a:9f:
3d:cb:6e:80:13:17:c6:1e:42:7d:b5:0f:7f:5a:75:
bf:a5:05:7e:eb:99:c3:fd:7c:34:7f:a6:c1:34:7d:
b7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A5:39:71:C3:DE:17:E3:A2:6B:86:8A:67:98:FA:59:DB:92:F7:40
X509v3 Authority Key Identifier:
keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3d:3e:85:d1:60:e2:ec:a5:63:89:d3:13:57:cd:ca:a1:ff:
1e:ae:d1:8e:ff:41:67:5f:b1:bf:33:fc:51:bf:6b:30:ca:39:
eb:aa:56:b2:5a:1a:a6:f9:0c:2e:e4:0c:b4:72:4b:64:cd:e5:
4d:53:b8:50:12:27:34:00:08:0e:76:ff:c6:33:fa:7e:83:1a:
49:18:9c:85:9f:b2:e6:ec:c5:bd:9c:61:dd:6e:42:05:f9:c6:
42:fb:96:b8:c2:ab:22:97:3f:cd:7b:bd:68:23:56:d9:43:45:
63:42:a7:33:32:73:c1:2d:5d:5f:7e:fa:98:01:25:0e:fe:34:
70:59:8e:fb:6c:04:27:40:29:90:d7:ba:8c:04:28:2a:f6:8f:
aa:81:a9:a7:60:4c:ec:97:26:75:24:28:90:9f:e9:d6:3e:42:
bb:a0:90:fe:a0:1a:b6:51:57:e1:0a:4e:fa:40:2a:ed:c3:43:
c4:63:d8:c3:45:ba:42:f0:75:fa:0b:d0:47:a3:23:c8:de:a4:
88:7e:a0:de:01:39:b7:7c:a6:7e:f2:d3:85:69:64:67:03:ec:
c1:80:7f:68:04:73:20:c2:81:a6:bd:d0:a9:d9:aa:e8:dd:5c:
12:42:eb:c6:a6:8d:8f:18:af:39:24:3c:be:ee:aa:0d:a8:65:
79:f7:44:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:38:51 2025 by rpki-client